Privacy Policy

1. Introduction

SubRadar ("we", "us", or "our") is operated by Goalin LLP (ТОО Goalin), registered in the Republic of Kazakhstan. We are committed to protecting your personal information and your right to privacy.

This Privacy Policy explains how we collect, use, store, and share your information when you use SubRadar via our website (subradar.ai, app.subradar.ai) and mobile applications (iOS, Android).

By using SubRadar, you agree to this policy. Contact us at support@subradar.ai with any questions.

2. Information We Collect

• Account information: Email address, display name, and profile picture obtained via Google OAuth, Apple Sign-In, or email registration.
• Subscription data: Names, prices, billing cycles, renewal dates, categories, and notes for subscriptions you add.
• Payment card references: Last 4 digits and card brand (Visa, MC, etc.) for cards you associate with subscriptions. We never store full card numbers, CVV, or expiry dates.
• Voice recordings (optional): If you use voice input, audio is temporarily sent to our server for transcription via OpenAI Whisper and immediately deleted after processing. We do not store voice recordings.
• Screenshots (optional): If you use Screenshot Scan, images are temporarily processed by AI and immediately deleted after data extraction.
• Usage data: Pages visited, features used, session timestamps, device type, OS version, and app version.
• Push notification tokens: Device tokens (FCM) for sending subscription reminders. You can disable notifications at any time.
• Purchase data: Subscription plan type (Free/Pro/Team), purchase dates, and billing status. Payment processing is handled entirely by Apple App Store, Google Play, or Lemon Squeezy.

3. How We Use Your Information

• Service delivery: To operate SubRadar and provide subscription tracking, reminders, and analytics.
• Smart reminders: To send push notifications and email alerts before upcoming charges.
• Analytics: To generate spending reports, monthly summaries, and category breakdowns within the app.
• AI features: To power voice input transcription, subscription search, and screenshot parsing. Data is sent to OpenAI for processing.
• Tax reports: To compile and export PDF reports of your subscription expenses.
• Product improvement: To understand usage patterns, fix bugs, and improve features.
• Communications: To send transactional emails (receipts, subscription confirmations, important service updates). We do not send marketing emails without consent.

4. Data Storage & Security

Your data is stored on servers hosted by DigitalOcean in Frankfurt, Germany (EU region), subject to GDPR-level protections.

Security measures include: encrypted connections (HTTPS/TLS), encrypted database storage (AES-256), hashed passwords and tokens (bcrypt), and strict access controls. Only authorized personnel access production systems.

We retain your data for as long as your account is active. Upon account deletion, all personal data is permanently removed within 30 days. Anonymized analytics data may be retained for product improvement.

5. Third-Party Services

We use the following third-party services:

• Google OAuth — Authentication. policies.google.com/privacy
• Apple Sign-In — Authentication on iOS devices. apple.com/legal/privacy
• OpenAI — AI features (voice transcription, subscription search, screenshot parsing). Data processed per API terms, not used to train models. openai.com/privacy
• RevenueCat — In-app purchase management for iOS/Android. revenuecat.com/privacy
• Lemon Squeezy — Web payment processor for Pro/Team plans. lemonsqueezy.com/privacy
• Apple App Store / Google Play — In-app purchases. Payments handled entirely by Apple/Google. We do not receive or store payment card details from mobile purchases.
• Firebase Cloud Messaging (FCM) — Push notification delivery. firebase.google.com/support/privacy

We do not sell your personal data. We do not share data with advertisers or data brokers.

6. Cookies & Local Storage

We use cookies and browser/app local storage for authentication tokens, theme preferences, language settings, and currency preferences. These are essential for service operation.

We do not use advertising cookies, tracking pixels, or cross-site analytics. See our Cookie Policy for details.

7. Your Rights

Regardless of your location, you have the right to:

• Access: Request a copy of all personal data we hold about you.
• Export: Download your subscription data in JSON format from Settings.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Delete your account and all data via Settings → Account → Delete Account, or by emailing us.
• Portability: Receive your data in a machine-readable format.
• Objection: Object to processing of your data for certain purposes.
• Withdraw consent: Withdraw consent for data processing at any time (this may affect service functionality).

To exercise any right, contact support@subradar.ai. We respond within 30 days.

8. International Data Transfers

Your data is stored in the EU (Germany). If you access SubRadar from outside the EU, your data is transferred to and processed in the EU. We ensure appropriate safeguards are in place for all international transfers.

9. Children's Privacy

SubRadar is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification at least 14 days before they take effect. Continued use after changes constitutes acceptance.

11. Governing Law

This Privacy Policy is governed by the laws of the Republic of Kazakhstan. Any disputes shall be resolved in the courts of Almaty, Kazakhstan.

12. Contact Us